v0.1.1

v0.1.1

Added

• Supported Languages section in README.md (Rust, TypeScript, Python, C++)
• Multi-root fallback for resolveFilePath(): relative paths without cwd now scan all allowed roots — unique match auto-resolves, multiple matches produce disambiguation error (6 new tests)
• 6 new tests for resolveFilePath multi-root fallback (total 300, up from 294)
• Tool Annotations (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) for all 17 tools per MCP spec
• src/__tests__/tool-integration.test.ts — 23 new tests covering list_tools, help_tool, read_log_slice, list_allowed_roots, resolve_cwd
• M8ven Trust Index badge in README.md
• Release automation script (scripts/release.cjs)
• Pre-commit hook: blocks sensitive files (.env, .key, .pem, etc.)
• Pre-push hook: gitleaks scan + path scanner for tracked files
• 7 refactoring tools (Phase 1–3):
  • universal_find_references — language-agnostic symbol search with optional role detection (declaration/import/usage)
  • extract_code_block — code block extraction with annotation-aware, string/comment-safe bracket matching
  • split_file_by_declarations — split large files into modules with index generation (mod.rs/index.ts/init.py)
  • batch_apply_edits — atomic multi-file edits with validation-first and rollback on failure
  • generate_module_skeleton — generate module files by extracting symbols from source
  • verify_refactor_safety — semantic diff with 5 checks (function count, signatures, exports, imports, comment ratio)
• report_tool_feedback — agent feedback tool for bugs, improvements, feature requests (writes to .mcp/FEEDBACK.md, idempotent, project-protected)
• list_feedback — list feedback entries with optional filters (type, tool, status)
• close_feedback — close feedback entries by ID with optional resolution text
• list_tools — lists all available MCP tools with markdown-formatted descriptions, filterable by category
• help_tool — detailed help for any tool including markdown parameter table
• textResult() / jsonResult() helpers in src/format.ts for consistent MCP response formatting
• Test fixtures (src/__tests__/fixtures/) with Rust, TypeScript, Python test data
• Bypass test suite: 14 tests documenting security heuristic coverage and known limitations (base64, variable indirection, encoded cd)
• Integration test suite (src/__tests__/handlers.test.ts): 7 tests verifying tool output format
• Shared resolveFilePath() helper in src/safety.ts — unified file path resolution with alias lookup + allowed roots validation for all file-based tools
• cwd parameter for split_file_by_declarations, generate_module_skeleton, and batch_apply_edits (relative path resolution)
• 6 new tests for resolveFilePath() (total 269, up from 263)
• 116 new tests (total 263, up from 147)
• Shared parsing helpers exported from src/symbols.ts (tokenizer, bracket matching, annotation detection)
• tsconfig.json: exclude test fixtures from compilation

Changed

• resolveFilePath() now checks file existence on disk before falling back to scan other allowed roots — prevents silent misresolution when multiple projects share common filenames (e.g. index.ts, README.md)
• README.md: added cwd parameter to extract_code_block documentation, updated test badge to 300, described multi-root path resolution in batch_apply_edits and Typical workflow section
• PROJECT_CONTEXT.md: added language support entry, updated test count to 300
• index.ts refactored — extracted src/commands.ts (safetyCheck, executeCommand, executeGrep, resolveToolCwd) and src/helpers.ts (temp paths, audit log, line parsing); index.ts reduced from 1349 to 950 lines (-30%)
• Audit logging removed from list_tools and help_tool (discovery tools are now truly read-only)
• Upgraded @modelcontextprotocol/sdk from 1.29.0 to 1.30.0
• Refactored extract_code_block to use shared resolveFilePath() (replaced inline ad-hoc path resolution with safety validation)

Fixed

• README.md: test count badge updated from 294 to 300
• Closed feedback: batch_apply_edits relative paths now resolve across allowed roots
• Closed feedback: list_tools raw JSON envelope — identified as Cline client display issue, not server bug
• batch_apply_edits: added cwd parameter + resolveFilePath() — now resolves relative paths (was returning "Cannot read file" for files in newly created subdirectories)
• split_file_by_declarations & generate_module_skeleton: multi-line use/import blocks now collected completely (was truncated at first line, breaking generated imports)
• extract_code_block & split_file_by_declarations: removed # → line comment handling from tokenizer — Rust #[derive(...)]/#[allow(...)] attributes no longer cause missing closing braces in extracted functions
• split_file_by_declarations: now includes top-level use/import statements in generated modules
• split_file_by_declarations: detects and appends impl blocks associated with extracted types (Rust)
• split_file_by_declarations & generate_module_skeleton: relative file paths now resolve correctly via shared resolveFilePath() helper (was returning "Cannot read file")
• split_file_by_declarations: finds private declarations (fn, const, struct) and pub(crate)/pub(super) items
• generate_module_skeleton: filters extractCodeBlock matches to declaration-only — no more garbled output from usage sites
• generate_module_skeleton: imports now only collected from top-level (no indented use statements)
• split_file_by_declarations: cross-module references now generate use super::TypeName; imports
• split_file_by_declarations: cfg-aware cross-module imports — wraps with #[cfg(...)] when symbol is only used in cfg-gated code, falls back to #[allow(unused_imports)]
• split_file_by_declarations: mod blocks (e.g. #[cfg(test)] mod tests) now extractable
• batch_apply_edits: multiple edits to same file now accumulate correctly (was overwriting previous edits)
• batch_apply_edits: CRLF line endings now handled — normalizes to LF for comparison, preserves original endings in output
• extract_code_block: added cwd parameter — relative paths now resolved against cwd or primary root
• universal_find_references: without cwd, now searches ALL allowed roots (was defaulting to primary root only)
• LICENSE restructured — standard GPL text first, project copyright as appendix